<?php
/*
   This scrip uses the "unsafe" variable
   $_REQUEST. Deleting the $_POST and 
   $_GET variable doesn't affect the content 
   of the $_REQUEST variable. Therfore you can
   still add ?highscore=TheScoreYouWant to the
   url and it will add it to the database.
*/

   /* HIGHSCORE SUBMITING SCRIPT */

   // Remove all POST and GET variables
   // so there is only cookie in the
   // request array.
   unset( $_POST, $_GET );

   // Get the cookie with the score
   $highscore  = $_REQUEST['highscore'];

   // Make sure the highscore is an integer
   $highscore  = intval( $highscore );

   // Add score to database
   // ...

   // Print the score
   echo $highscore;
?>